Rodolfo Assis
@RodoAssis
Followers
10K
Following
3K
Media
530
Statuses
3K
That #XSS and #WAF #bypass guy. @BRuteLogic @KN0X55
Brazil š§š·
Joined March 2018
I don't think that watching/reading #hacking tutorials and collecting BB tips in Twitter or any other social media will make you UNDERSTAND what you are doing and why that happens. Build a solid foundation with PROGRAMMING, NETWORKING, PROTOCOLS and OPERATING SYSTEMS first.
16
65
423
I'm just 1 click away from knowing if there's a WAF (and which one) with my super simple "WAFme" bookmarklet. JavaScript:w='?j=<script>&';l=location;q=w;if(q=replace('?',w);location=' https://'+l.hostname+l.pathname+q+l.hash.
#XSS
1
4
44
That JavaScript scenario is full of tricks.
#XSS tricks to #Bypass #WAF in the URL Context.by @BRuteLogic. => HTMLi + Double Encoding + Embedded Bytes. JavaScript:"<Svg/OnLoad=alert%25%0A26lpar;1)>". JavaScript:"\%0A74Svg/On%0ALoad=alert%25%0A26lpar;1%25%0A26rpar;>". Lab KNOXSS has similar ones! š
0
0
6
That's why I say I'm an artist, not a hacker:. I depend on inspiration to work.
0
1
4
RT @RodoAssis: Hey bug hunter! . Do you have a WAF or any other filter in your way?. Let's COLLABORATE! š¤©. Any bug, 50/50 just DM me with dā¦.
0
1
0
Hey bug hunter! . Do you have a WAF or any other filter in your way?. Let's COLLABORATE! š¤©. Any bug, 50/50 just DM me with details. #hack2learn
0
1
12
Another day, another way to bypass a WAF. Stay tuned, I'm documenting them all!.
1
1
13
RT @KN0X55: We just published our 1st blog post! . We hope to be just the beginning of everything #XSS related we know. Check it out! šā¦.
knoxss.pro
Finding XSS vulnerable targets is not an easy task when doing Bug Bounties but these thoughts will help you.
0
4
0
If you blindly trust LLMs like chatGPT, Claude or Gemini you are smart as they are. Check my chat with Claude starting with "XSS Filter Bypass" but ending up on how absolutely useless it is for anything serious. Claude is considered to be "very smart".
0
2
6
It's super hard to take care of 50+ cats and dogs every single day, you have no idea.
0
0
4
What's wrong here? . Try to PoC a XSS using ALert(1) instead of alert(1)!. Bypassing a filter with incorrect syntax is not a bypass.
1
0
9
Imperva guys fix their WAF so badly that you just need to change the order of the attributes in the previous bypass and it works. š¤Ŗ
0
1
17
Why this is important?. Unless you test every entry point w/ something like alert(1) exactly that way, no quotes, nothing, you won't be able to spot eval() like scenarios w/ a regular #XSS vector like <Img/Src/OnError=alert(1)>. Unless you read all the JS source code, of course.
A DOM-Based #XSS Polyglot. 1;/*'"><Img/Src/OnError=/**/confirm(1)//>. If your input happens to end up in the DOM via innerHTML or eval(), it works for both cases. PoCs below. innerHTML: eval():
0
1
4
RT @RodoAssis: Between white and black, there's a lot of grey. #Hacking . That's something you learn in LIFE itself. #hack2learn
https://t.ā¦.
0
2
0
Between white and black, there's a lot of grey. #Hacking . That's something you learn in LIFE itself. #hack2learn
0
2
10